Organizations subject to the U.S. Department of Justice’s Bulk Data Transfer Rule should begin preparing now for the first annual audit and certification deadline, which is due by October 6, 2026. The rule requires covered entities to assess compliance with…
Posts by Category: Data Protection & Privacy
Alabama Enacts Comprehensive Data Protection Law
Alabama’s comprehensive data privacy law establishes new consumer rights and compliance obligations for businesses that collect or process residents’ personal data. Consumers gain rights to access, correct, delete, and obtain copies of their personal information, as…
New Jersey Adopts Sweeping New Data Broker Law, Effective Immediately
New Jersey’s Data Privacy Act establishes comprehensive consumer privacy protections and imposes new compliance obligations on businesses that collect or process personal data. The law grants consumers rights to access, correct, delete, and obtain copies of their…
Vermont Data Privacy and Online Surveillance Act
On June 16, 2026, Governor Phil Scott signed the Vermont Data Privacy and Online Surveillance Act (S.71) into law. The law takes effect January 1, 2028, giving businesses roughly 18 months to establish compliance programs. With its signing, Vermont becomes the 21st…
Connecticut Dramatically Expands Its Data Privacy Act: What Businesses Need to Know Now
Connecticut has significantly expanded and toughened its consumer privacy law that includes new obligations on data controllers. Under Senate Bill 1295 (Public Act 25-113), sweeping amendments to the Connecticut Data Privacy Act (CTDPA) took effect on July 1, 2026,…
Indiana Consumer Data Protection Bill of Rights – What Businesses Need to Know About Compliance
The Indiana Consumer Data Protection Act (INCDPA) establishes a comprehensive privacy framework granting Indiana residents rights over their personal data, including access, correction, deletion, and opt-out rights for targeted advertising, data sales, and profiling….
Louisiana Enacts Consumer Data Privacy Law
Louisiana has enacted the Louisiana Data Privacy Act (LDPA), becoming the 22nd U.S. state to adopt a comprehensive consumer data privacy law. Signed in May 2026 and effective January 1, 2027, the law grants consumers rights to access, correct, delete, and opt out of…
Delaware’s Privacy Law is About to Expand: 6 Steps Employers and Businesses Should Take to Prepare
Delaware’s comprehensive privacy law is set to take effect, granting residents new rights over their personal information, including the ability to access, correct, delete, and obtain copies of data collected about them. The law also allows consumers to opt out of…
New State Privacy Laws Signal Growing Partisan Divide
There are a wave of new state privacy laws taking effect across the United States, signaling continued expansion of consumer data protection requirements beyond early adopters such as California, Virginia, and Colorado. Emerging laws introduce broader consumer rights,…
State Privacy Laws Show the SECURE Data Act’s Merits and Political Appeal
The SECURE Data Act reflects a bipartisan, state‑driven consensus on privacy. It rejects assumptions that stricter rules are inherently better, noting that most states favor flexible data‑minimization standards, centralized enforcement by the FTC and attorneys…


